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(54) Method of operating a motor vehicle management computer system 

(57) A driver information System for a motor vehicle " terface software objects that are i equired during that ex- 



includes a network which executes one of a number of 
application programs depending on which function of 
the system the driver has selected at any given point in 
time. In response to the driver's selection, the appropri- 
ate application program is retrieved from storage for ex- 
ecution. Information regarding the specific hardware in- 



ecution are read from the retrieved application program 
and loaded for execution. Thus only the software that is 
necessary to implement the selected function is loaded 
for execution which reduces the complexity of the hard- 
ware of the driver information system. A method for ver- 
ifying the compatibility of each software program and 
object also is described. 
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Description 

Background of the Invention 

[0001] The present invention relates to control of com- 
ponents within a motor vehicle utilizing an on-board 
computer network; and more particularly to a process 
for sequentially executing a plurality of motor vehicle 
programs on the computer network. 
[0002] Computer systems are finding greater applica- 
tion in motor vehicles, for engine control, dashboard dis- 
plays and passenger comfort systems for example. This 
applies not only to passenger automobiles, but also to 
trucks such as long haul semi-trailer trucks. Computer 
systems allow monitoring and display of the functional 
performance of the truck, as well as vehicle tracking, 
guidance and logging of information required by govern- 
mental authorities. It is desirable to integrate all of these 
functions into one on-board computer. That integration 
allows the driver to select among available features and 
have the relevant information presented on a common 
display device within the truck cab. 
[0003] Although it is possible to enable all of the soft- 
ware programs for these features to execute simultane- 
ously on the computer, such simultaneous execution re- 
quires a relatively high speed, sophisticated microcom- 



[0007] These and other objectives are satisfied by 
storing a plurality of application programs which imple- 
ment motor vehicle management functions and storing 
a plurality of hardware support objects for interfacing the 

s application program to the data input devices and data 
output devices of the motor vehicle. 
[0008] The operator of the motor vehicle selects a de- 
sired function to be performed by the driver information 
system which selection produces a designation of the 

io application program which implements that function. 
Data is read from the selected application program 
which designation one or more of hardware support ob- 
jects that are required by the selected application pro- 
gram. Those designated hardware support objects then 

is are retrieved from storage for execution by the motor 
vehicle management computer system along with the 
selected application program. 

[0009] The preferred embodiment of the present in- 
vention also stores validation codes in each application 

20 program and hardware support object. A list of the val- 
idation codes which correspond to specific application 
programs and hardware support objects that are author- 
ized to be executed by the particular motor vehicle man- 
agement computer system also are stored in a list. 

25 When a given application program or hardware support 
object is designated for execution, it is allowed to be ex- 



puter and other components. Thus such simultaneous 
execution significantly increases the cost of the compu- 
ter system and it is always desirable to minimize the cost 
of any system. Therefore, it is preferable to enable the 
motor vehicle computer system to load and execute only 
the application program that implements the specific 
function selected by the driver. Similarly it is desirable 
to load only the interface routines which are required by 
that application program. In other words, a particular ap- 
plication program may not require access to certain net- 
work components and thus the interface routines for 
those components do not have to be loaded for execu- 
tion. For example if the driver selects the application to 
monitor engine performance ! that application does not 
require access to an external communication device, 
such as a cellulartelephone, used to exchange data be- 
tween the truck and a dispatch facility of the trucking 
company. 

Summary of the Invention 



ecuted only if its validation code is on the stored list. This 
prevents incompatible software from being executed 
which could adversely affect the operation of the motor 
30 vehicle. 

Brief Description of the Drawings 
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[0010] 

FIGURE 1 is a block schematic diagram of an ex- 
emplary motor vehicle computer system on which 
the present invention may be implemented; 
FIGURE 2 is a diagram of the architecture layers of 
the software executed by th e computer system; and 
FIGURE 3 depicts data contained in each applica- 
tion program to inform the computer system which 
support software objects are required for execution 
of that application program. 

Detailed Description of the Invention 



[0004] A general object of the present invention is to 
provide an economical computer system for monitoring 
vehicle operation and providing information to the driver. 
[0005] Another object is to provide such a computer 
system which only loads and executes the specific soft- 
ware objects that are required to implement the func- 
tions selected by the driver. 

[0006] A further object of the present invention is to 
provide a technique by which each application program 
identifies the support software object which are requires 
for execution. 



[0011] With initial reference to Figure 1 , a driver infor- 
mation system 10 for a motor vehicle is built around a 
microcomputer 1 2 which includes a conventional micro- 
processor internal random access memory, read only 
memory, and interface circuitry. An external storage sys- 
tem 14 is connected to the microcomputer 12 and may 
comprise additional random access memory, a hard 
disk, a floppy disk, or a combination of those devices. 
The microcomputer 12 also is connected to a display 
interface 16 which translates output data into a format 
for display on a standard computer display device 18, 
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such as an electroluminescent display, liquid crystal dis- 
play, or similar device: 

[0012] Adjacent to the display device 18 are compo- 
nents which allow the driver to select various tunctions 
ol the computer system and enter data tor processing. 
Specifically a keyboard 22, or other input device, is con- 
nected to an input port of the microcomputer 1 2. A con- 
ventional touch screen input device 24 may be associ- 
ated with the display device 18 allowing the vehicle op- 
erator to select displayed items, such as from a menu 
by merely touching the surface of the display screen. 
[0013] The microcomputer 12 also is coupled via ve- 
hicle communication bus interface 26 to other compo- 
nents and vehicle systems that are connected to an on- 
board truck communication network 28. For example, 
the engine control system 30 provides the driver infor- 
mation system 1 0 with data regarding engine perform- 
ance. Such engine data may include intake air temper- 
ature, battery voltage, coolant level and temperature, 
engine power and speed, fuel usage, exhaust manifold 
pressure, oil pressure, vehicle speed and engine RPM. 
The driver information system 10 uses the engine per- 
formance data to derive other operational information 
about the vehicle, such as total engine operating hours, 
total vehicle hours, trip distance and trip fuel consump- 
tion. The driver information system 1 0 also can provide 
. operational commands to the engine control system au 
for controlling sophisticated vehicle functions, such as 
cruise control, automatic shifting of the transmission and 
anti-lock braking. 

[0014] Other truck components connected to the 
communication network 28 can include a mechanism 32 
for monitoring tire pressure and brake wear. On refrig- 
erator trucks, interface can be provided via the commu- 
nication network 28 to the refrigerator controller 34. Ad- 
ditional components of the truck can include a collision 
warning system 36. 

[001 5] The driver information system 1 0 also interfac- 
es to the external world via an external communication 
interface 38 which couples the microcomputer 12 to a 
communication device, such as a cellular telephone 40, 
two-way radio or communication satellite transceiver. A 
bidirectional port 42 allows an external computer system 
or communication link to be connected to the truck via 
a connector suitably located on the tractor cab. A con- 
ventional global positioning system (GPS) 44 also is in- 
terfaced to the microcomputer 12 thereby enabling the 
determination of the truck's present location. This loca- 
tion information can be utilized by the driver information 
system 10 to display a map for guiding the driver to a 
desired destination. In addition, the GPS information 
can be utilized to relay the truck's location to a dispatch 
facility of the trucking company via the external commu- 
nication circuits 38 and 40. Other uses for the GPS in- 
formation will be described herein. 
[0016] Because of the large number of functions avail- 
able on the driver information system 10, it is evident 
that all of the available information cannot be presented 



simultaneously to the driver in an easily readable and 
comprehendible lorm. As a consequence, the driver is 
able to display a menu of those various functions and 
select, via input devices 22 and 24, which function to be 
5 displayed at any given time. In response to that selec- 
tion, the associated application software for that function 
is retrieved from the storage system 14, loaded into the 
microcomputer 12 and executed. Each application pro- 
gram requires additional hardware support objects in or- 
10 der for the application program to receive required input 
data and send output data to the appropriate devices. 
[0017] With reference to Figure 2, the architecture of 
the software for the driver information system 10 is or- 
ganized in a number of layers as is conventional with 
is complex computer systems. The upper layer in the 
drawing is a database manager 49 which archives and 
retrieves information retained in a database collection 
52 in storage device 14. The database collection con- 
tains files of information regarding the functionality of 
20 the truck and data generated by the different application 
programs, as will be described. Application layer 45 
comprises the main programs for implementing the var- 
ious display functions, such as monitoring engine per- 
formance, maintaining the driver's log, calculating fuel 
25 taxes and handling the system configuration. The next - 

software layer is a communication layer 46 which con- 
— — trols exchange of data b etween the selected application 
program and the hardware support layer 47. The hard- 
ware support layer 47 comprises a set of objects for in- 
30 terracing the hardware devices, such as the external 
communication interface 38 or the vehicle communica- 
tion bus interface 26. The lowest architectural layer, the 
hardware abstraction layer 48, consists of the software 
to communicate with the hardware devices of the com- 
35 puter system. These devices include the engine control 
system 30, collision warning circuit 36, cellular tele- 
phone 40 and global positioning system 44, among oth- 
ers. 

[0018] The database manager 49 is an object that 
40 saves and retrieves persistent data in the storage sys- 
tem 14 as represented by the database collection 52 in 
Figure 2. Examples of the persistent data are the trip 
log, vehicle maintenance history, travel itinerary and 
truck performance information. Most applications use 
45 the database manager 49 to save string based informa- 
tion along with geographical, temporal and driver infor- 
mation. For example, the database can be used for trav- 
el itinerary information in the following manner. When 
the driver logs into the truck at the beginning of a route 
so the database manager saves the time and date of that 
event, as well as the geographical location based on lat- 
itude and longitude received from the global position 
system 44. Also saved are an action identifier indicating 
that the present event is a driver log-in and the driver's 
55 identification number entered into the keyboard 22. Sim- 
ilar information will be stored each time the driver shuts 
off and restarts the engine as occurs at each stop along 
the truck's route. The database information can be 
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transferred by the database manager 49 via the com- 
munication interface object 54 and the external commu- 
nication hardware interface 38 to an external communi- 
cation system. This transfer can either be through the 
hardwired communication port 42 or the remote com- 
munication device, such as cellular telephone 40. 
[0019] The communication interface object is part of 
the hardware support layer 47 which is composed of ob- 
jects that interact with the physical devices of the com- 
puter system. These objects act as device drivers, vir- 
tual switches and software interfaces to any piece of 
hardware that may be attached to the system. These 
objects also provide a level of order to the system by 
being required to provide a validation code prior to load- 
ing. The validation code allows the configuration man- 
ager 50 to determine that a specific object will interact 
properly with the computer system and will not adverse- 
ly affect the performance of this particular motor vehicle. 
Therefore only properly validated objects are allowed to 
run on the computer system. 

[0020] With continuing reference to Figure 2, the ap- 
plication layer 45 as previously described comprises ap- 
plication programs for implementing a wide variety of 
features. Each application layer object includes the soft- 
ware component that enables the microcomputer to per- 
form the r elated fu nction^ a graphic user interface (GUI) 
for presenting data to the driver via a display 18 and a 
repertoire of message information for that display. It 
should be understood, the application layer 45 compris- 
es a greater number of application programs than those 
illustrated. 

[0021] The configuration manager 50 is an application 
program that always is running and supervises the op- 
eration of the driver information system 10. In that re- 
gard, configuration manager 50 monitors the processes, 
loads objects as needed, and unloads objects when 
they are no longer required. The configuration manager 
also provides the methodology for verifying that soft- 
ware components are all qualified to be executed on the 
driver information system 10 so that they will operate 
properly in the environment of this particular truck and 
will not adversely affect other systems. 
[0022] Other application programs are loaded and ex- 
ecuted by the microcomputer 12 only when needed to 
perform a function selected by the vehicle driver. An ex- 
ample of such an application program is the fuel tax cal- 
culator 56. This application tracks the amount of fuel 
purchased in each state, the quantity of fuel used in 
each state, and the amount of purchased fuel that is ex- 
empt from highway use tax (e.g. fuel consumed by the 
refrigeration equipment, power units, heaters, and dur- 
ing engine idling). 

[0023] The fuel tax calculator 56 requires that the driv- 
er information system 10 know in which governmental 
state the vehicle is operating at 2 given points in time. 
This knowledge is obtained from the location informa- 
tion produced by the global position system 44 and in- 
formation stored within the database collection 52 re- 



garding the political boundaries of each governmental 
state. In addition, the fuel tax calculator 56 requires 
odometer readings and fuel consumption data from the 
engine control system 30 via the truck bus interface ob- 
s ject 60. The driver also must enter information into the 
keyboard 22 that identifies the type, quantity and price 
of the fuel purchased and whether the fuel was for the 
engine or non-engine consumption. 
[0024] From that input data, the execution of the fuel 
10 tax calculator 56 by the microcomputer 12 determines 
the amounts of fuel purchased and used in each gov- 
ernmental state, and the quantity of fuel that is exempt 
from highway use taxes because of non-engine use. 
That cumulative information is conveyed to the data- 
's base manager 49 for retention in the database collection 
52 in storage system 14. 

[0025] The fuel tax calculator application 56 also in- 
teracts with other network components, such as the ex- 
ternal communication interface 38 and cellular tele- 

20 phone 40 to communicate the fuel information to the dis- 
patch facility of the trucking company. Other application 
programs have similar requirements for connection to 
different components connected to the communication 
network 28 of the truck, as well as receiving data from 

25 the driver. 

[0026]- -Therefore each of the application programs re- 
quires the use of selected hardware support objects 54 
and 60-66 in order to perform their functions. For exam- 
ple the engine performance application program 58 

30 needs to exchange data over the truck communication 
network 28 via the truck bus interface module 60 in Fig- 
ure 2, but does not require the use of the global posi- 
tioning interface 62 or the communication interface 54. 
As a consequence those latter interface objects 54 and 

35 62 do not have to be loaded for execution by the micro- 
computer 12 when the engine performance application 
program 58 has been selected by the driver. 
[0027] By enablinglhe configuration manager 50 to 
determine which objects of the hardware support layer 

40 47 are required in order to execute the selected appli- 
cation program, a slower and less sophisticated micro- 
computer 12 may be utilized than would otherwise be 
required if all of the hardware support layer objects had 
to execute continuously in order to accommodate all of 

45 the application programs which could be selected. Thus 
the present configuration manager 50 utilizes a tech- 
nique by which it learns exactly which hardware support 
layer objects are required by a particular application pro- 
gram when the associated system function is selected 

50 by the driver. 

[0028] When the driver chooses a function, such as 
the monitoring engine performance, the configuration 
manager 50 receives that selection from the keyboard 
22 and loads the appropriate application program from 

55 the storage system 14 into active system memory for 
execution. Part of the information which is stored in the 
application object is authorization and verification data 
which enables the configuration manager 50 to deter- 
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mine that the retrieved application program is compati- 
ble for execution on this particular truck's computer sys- 
tem. Such verification is required in order to ensure that 
the particular software will not corrupt the performance 
of the computer system or the truck in general. 
[0029] This authorization and verification data within 
the application program is contained in a data structure 
depicted in Figure 3 and comprises a data field 70 con- 
taining an application code. The application code iden- 
tifies not only the type of application, in this case an en- 
gine performance object, but the particular version of 
that application program. For example, different vehi- 
cles require distinct engine performance objects as their 
engine control systems and other components will be 
different. Therefore, the configuration manager 50 must 
not only verify that the object retrieved from storage de- 
vice 14 is in fact an engine performance object, but that 
it is a particular engine performance object which is 
compatible with this specific vehicle. In order to do so, 
database collection 52 contains a table of specific ap- 
plication and hardware support objects which are com- 
patible with this particular computer system and motor 
vehicle. The application code in data field 70 of the re- 
trieved application program is compared to the table of 
compatible objects in the database collection 52 before 
the application program is enabled for exec utjpn can be 
executed. Such confirmation and verification eliminates 
the execution of an improper software program which 
could have inadvertently been stored in the driver infor- 
mation system 10. 

[0030] Once the application program which has been 
retrieved from storage 14 has been verified as being a 
proper one for the presently selected function, the con- 
figuration manager inspects other data fields 72, 74 and 
76 in the data structure of Figure 3. These fields contain 
information identifying the particular hardware support 
layer objects 54 and 60-66 which are required during 
execution of the selected application object. For exam- 
ple in the case of the engine performance program 58, 
the computer system must also retrieve hardware sup- 
port layer objects for the truck bus interface module 60 
and the display interface 64 and input interface 66. Dif- 
ferent application programs require different combina- 
tions of hardware support objects/For example, as not- 
ed previously the fuel tax calculator 56 requires not only 
the truck bus interface module object 60 but also the 
GPS interface 62 and the display and input interfaces 
64 and 66 respectively. By loading only the minimum 
required hardware support layer objects, the size of the 
active memory and the complexity of the microcomputer 
can be minimized. 

[0031] Each hardware support layer object contains 
a hardware support code, similar in function to the ap- 
plication code for an application program. When a given 
hardware support layer object is retrieved from the stor- 
age system 14 for execution, its hardware support code 
is read and compared to a list of valid hardware support 
codes stored in the driver information system 10. The 



given hardware support layer object will only be execut- 
ed by the microcomputer 1 2 if its hardware support code 
is found on that list. This verification process prevents 
an improper hardware support layer object that was in- 
5 advertently placed in the storage system 1 2 from being 
executed by the driver information system 10. Such ex- 
ecution of an improper hardware support layer object 
could adversely affect the operation of the motor vehi- 
cle. 

10 

Claims 

1 . A method for selecting software to be executed by 
is a motor vehicle computer system (1 0), said method 
comprising: 



20 



25 



storing a plurality of application programs (50, 
56, 58) which implement functions of the motor 
vehicle and a plurality of hardware support ob- 
jects (54, 60-66) for interfacing the application 
program to the data input devices and data out- 
put devices of the motor vehicle; 
receiving a designation of one of the application 
programs (50, 56, or 58) as designated by an 
operator of the motor vehicle; 
reading, from the one of the application pro- 
grams (50, 56, or 58), designation of at least 
one of the plurality of hardware support objects 
30 (71, 72, 73) which are required by the one of 

the application programs; and 
executing the one of the application programs 
(50, 56, or 58) and the at least one of the plu- 
rality of hardware support objects (71 , 72, 73): 

35 

2. The method as recited in claim 1 further comprising: 

storing a list of application codes (70) which 
identify specific application programs (50, 56, 
40 58) which may be validly executed by the motor 

vehicle computer system (10); 
reading from the one of the application pro- 
grams (50, 56, or 58) a given application code 
(70); 

45 determining whether the given application code 

(70) is contained in the list of application codes, 
and if so producing a validation indication; and 
executing the one of the application programs 
(50, 56, or 58) in response to the validation in- 

so dication. 

3. The method as recited in claim 1 further comprising: 

storing a list ol hardware support codes which 
55 identify specific hardware support objects (54, 

60-66) which may be validly executed by the 
motor vehicle computer system (10); 
reading from the at least one of the plurality ol 
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hardware support objects (54, 60-66) a given 
hardware support code; 
determining whether the given hardware sup- 
port code is contained in the list of hardware 
support codes, and if so producing a validation 
indication; and 

enabling execution of the at least one of the plu- 
rality of hardware support objects (54, 60-66) 
in response to the validation indication. 

A method for selecting software to be executed by 
a motor vehicle computer system (1 0), said method 
comprising: 

storing a plurality of application programs (50, 
56, 58) which implement motor vehicle func- 
tions and a plurality of hardware support ob- 
jects (54 : 60-66) for interfacing the application 
program to the data input devices and data out- 
put devices of the motor vehicle; 
storing a list of application codes (70) which 
identify specific application programs (50, 56, 
58) which may be validly executed by the motor 
vehicle computer system (10); 
receiving a designation of one of the application 
programs (50 - 56, 58) as designated by an op- 
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rality of hardware support objects (54, 60-66) 
in response to the second validation indication. 

A method for selecting software to be executed by 
a driver information computer system (1 0) for a mo- 
tor vehicle, said method comprising: 

storing a plurality of application programs (50, 
56, 58) which implement information display 
functions and a plurality of hardware support 
objects (54, 60-66) for interfacing the applica- 
tion program to the data input devices and data 
output devices of the motor vehicle; 
storing a list of application codes (70) which 
identify specific application programs which 
may be validly executed by the driver informa- 
tion computer system (10); 
storing a list of hardware support codes which 
identify specific hardware support objects (54, 
60-66) which may be validly executed by the 
driver information computer system (10); 
receiving a designation of one of the application 
programs (50, 56, 58) as designated by an op- 
erator of the motor vehicle; 
reading, from the one of the application pro- 
grams (50, 56 , 58), a given a pplication code 



30 



35 



40 



erator of the motor vehicle; 
reading, from the one of the application pro- 
grams (50, 56, 58), a given application code 
(70); 

determining whether the given application code 
(70) is contained in the list of application codes, 
and if so producing a first validation indication; 
enabling execution of the one of the application 
programs (50, 56, 58) in response to the first 
validation indication; 

reading, from the one of the application pro- 
grams (50, 56, 58), designation of at least one 
of the plurality of hardware support objects (54, 
60-66) which is required by the one of the ap- 
plication programs; and 
enabling execution of the at least one of the plu- 
rality of hardware support objects (54, 60-66). 



The method as recited in claim 4 further comprising: 45 



storing a list of hardware support codes which 
identify specific hardware support objects (54, 
60-66) which may be validly executed by the 
motor vehicle computer system (1 0); 
reading from the at least one of the plurality of 
hardware support objects (54, 60-66), a given 
hardware support code; 

determining whether the given hardware sup- 
port code is contained in the list of hardware 
support codes, and if so producing a second 
validation indication; and 
enabling execution of the at least one of the plu- 



50 



55 



(70); 

determining whetherthe given application code 
(70) is contained in the list of application codes, 
and if so producing a first validation indication; 
enabling execution of the one of the application 
programs (50, 56, 58 in response to the first val- 
idation indication; 

reading, from the one of the application pro- 
grams (50, 56, 58, designation of at least one 
of the plurality of hardware support objects (54, 
60-66) which is required by the one of the ap- 
plication programs; 

. reading from the at least one of the plurality of 
hardware support objects (54, 60-66) a given 
hardware support code; 
determining whether the given hardware sup- 
port code is contained in the list of hardware 
support codes, and if so producing a second 
validation indication; and 
enabling execution of the at least one of the plu- 
rality of hardware support objects (54, 60-66) 
in response to the second validation indication. 



9EST AVAILABLE COPY 



EP 0 978 433 A2 



18 



DISPLAY 



o o o o 



<J— > 



16 



DISPLAY 
INTERFACE 



12 



'STORAGE 



MICROCOMPUTER 



KEYBOARD 



TOUCH 
SCREEN 



CELL 
PHONE 






1 — > 


EXTERNAL 

COMM. 
INTERFACE 





24 



26 



VEHICLE 
COMM. BUS 
INTERFACE 



44 



GLOBAL 
POSITION 
SYSTEM 



10 



FIG. 1 



ENGINE 



30 



TIRES & 
BRAKES 

32-^ 



REFRIG. 



34 



28 



I 



COLLISDON 
WARNING 



36 



70 



71 



APPLICATION 
CODE 



72 



HARDWARE 
SUPPORT 
OBJECT 



HARDWARE 
SUPPORT 
OBJECT 



73 



HARDWARE 
SUPPORT 
OBJECT 



F 



BEST AVAILABLE COPY 



EP 0 978 433 A2 




8 



BEST AVABLABLE COPY 



